Pricing

Pay per usage

Go to Apify Store

CISA CSAF ICS Advisory Extractor

Try for free

Extract CISA CSAF OT/ICS advisories as normalized JSON with CVEs, severity, mitigations, and quality flags.

Pricing

Pay per usage

Rating

0.0

(0)

Developer

OT Data Tools

Actor stats

Bookmarked

Total users

Monthly active users

7 days ago

Last modified

Industrial Advisory Monitor

Apify Actor that aggregates public industrial / OT / ICS security advisories into normalized JSON.

MVP scope (v0.2)

Source	Status	Default	Live
CISA CSAF OT (cisagov/CSAF)	✅ Default	`cisa-csaf`	PASS
CISA ICS RSS	Fallback	`cisa-rss`	403 blocked
Siemens ProductCERT	Planned	—
Schneider / ABB / Rockwell / Phoenix Contact	Planned	—

No secrets, no GitHub token, no login.

Why this actor?

Official machine-readable data — CSAF JSON from CISA via public GitHub repo.
Normalized JSON — vendor, CVEs, severity, mitigations, quality flags.
OT/ICS focus — built for compliance and threat-intel pipelines.

Input

{
  "source": "cisa-csaf",
  "vendors": ["Schneider"],
  "date_from": "2026-07-01",
  "severity_min": "medium",
  "max_items": 50,
  "include_raw": false
}

Default source is cisa-csaf. Use cisa-rss only for offline fixtures or if RSS becomes reachable.

Output fields

Each dataset item includes: vendor, title, product_or_family, severity, cve_ids, published_at, affected_versions, mitigation_summary, source_name, source_url, retrieved_at, quality_status, parser_warnings.

Rate limits & etiquette

CSAF: 1 GitHub API list call + up to max_items raw JSON fetches per run. No GitHub token.
RSS: 1 request per run (often HTTP 403 from automated clients).
Identifying User-Agent; conservative retries; no WAF evasion.

Quality status

Status	Meaning
`PASS`	Core fields present, no parser warnings
`WARN`	Usable but incomplete (e.g. inferred vendor)
`FAIL`	Missing critical fields

License

Proprietary — income-factory experiment IF-001.

CISA ICS Advisory Change Monitor - New & Updated Only

rtworule/cisa-ics-advisory-delta-monitor

Monitor official CISA ICS advisories and emit only new, updated, or removed CSAF records for OT security, vulnerability management, and compliance workflows.

Kunteper Koyu

CISA ICS Advisory Monitor

technicaldost/cisa-ics-advisory-monitor

Track industrial control system advisories from CISA for security and compliance teams.

Technical Dost Solutions

CISA ICS Advisory Asset Exposure Watcher

zentrafoundry/cisa-ics-advisory-asset-exposure-watcher

Map CISA ICS advisories to vendor and product watchlists and emit exposure events with CVEs and recommended action hints.

Zentra

Public ICS Event Calendar Extractor

s3nafps/public-ics-event-calendar-extractor

Extract structured events from public ICS and iCalendar feeds. Get event titles, dates, locations, descriptions, URLs, UIDs, and calendar names as JSON or CSV.

mohamed senator

CVE / Dependency Advisory Monitor

wiggly_book/cve-dependency-monitor

Monitor packages, CVEs, vendors, and products against OSV and CISA KEV. Returns deduped advisory rows for scheduled vulnerability-intelligence workflows.

Mack

Open Source Security Advisory Monitor

viniman27/open-source-security-advisory-monitor

Track exploited vulnerabilities and open-source security advisories from public CISA data.

Vinicius Assumpção de Araujo

CISA KEV Scraper

maximedupre/cisa-kev-scraper

Extract the official CISA Known Exploited Vulnerabilities catalog. Get CVEs, vendors, products, due dates, required actions, ransomware-use status, summaries, and remediation-planning rows.